Threats Tagged 'cve-2026-76380'
View all threats tagged with 'cve-2026-76380'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-76380'
Click on any threat for detailed analysis and mitigation recommendations
In versions below 5.1.3 of the CrowdStrike OAuth API app for Splunk SOAR, a vulnerability exists where the document_password parameter in the detonate file and detonate url actions is not masked. This causes the sensitive password to be displayed in cleartext in the user interface to users with permission to run actions. The issue arises because the app does not designate the parameter as a password type, leading to information disclosure. Join the discussion | GCVE Database | 08/20/2026, 00:35:04 UTC Added: 08/20/2026, 14:09:10 UTC |
CVE-2026-76380 affects the CrowdStrike OAuth API app for Splunk SOAR versions 5.1 and 5.1.x prior to 5.1.3. The vulnerability involves the exposure of a sensitive document password in cleartext within the user interface when running specific actions (detonate file or detonate url). This occurs because the document_password parameter is not masked, allowing users with permission to run actions to see the password. The issue is due to the app not marking this parameter as a password type. Join the discussion | CVE Database V5 | 08/19/2026, 21:35:03 UTC Added: 08/19/2026, 21:38:38 UTC |
Showing 1 to 2 of 2 results